Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9508712f-fe65-409d-b359-edec9d80231f.roa
File: 9508712f-fe65-409d-b359-edec9d80231f.roa (raw, json)
Hash identifier: vJmTAtkCmRGUwGu8vU2XhS+C26aoFVzjSW7a44HCDh4=
Subject key identifier: 41:F8:18:98:13:6D:AA:25:EF:6F:7E:E6:82:31:4D:4B:7D:B5:F9:1D
Certificate issuer: /CN=df759b5af3da6c9df033b0de998970a4e79655d0
Certificate serial: 16AE99D4999D115FC960B5E2721FFE6C9F4AB0AB
Authority key identifier: DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9508712f-fe65-409d-b359-edec9d80231f.roa
Signing time: Sun 26 Jul 2026 00:00:39 +0000
ROA not before: Sun 26 Jul 2026 00:00:39 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 51.74.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.mft
rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ae:99:d4:99:9d:11:5f:c9:60:b5:e2:72:1f:fe:6c:9f:4a:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df759b5af3da6c9df033b0de998970a4e79655d0
Validity
Not Before: Jul 26 00:00:39 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=71451f61722705f91b7a27419db5ccff3f2e7ce79aaa36c2ba1d5f78d3675b2e, CN=98d67deb-bb75-4e77-b1a0-36016b2d6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:04:9d:03:00:d8:d9:a5:9f:92:d0:bd:2e:
6b:4d:68:94:b4:3a:4c:95:b8:86:d8:14:c7:2e:57:
ba:02:b8:a6:92:d7:a6:a6:7b:73:d2:3a:e6:0c:c7:
56:86:30:18:71:5a:f8:06:6c:73:9b:e2:69:3e:08:
58:7b:2e:4e:ef:ea:57:b2:a6:60:e5:62:f6:6e:86:
a7:96:a5:08:4d:5f:1e:dd:1d:53:9e:c0:14:8b:db:
14:d7:1e:a7:cb:65:e5:e2:ac:b4:b7:3c:46:61:04:
c4:f8:3a:b2:bb:d7:ca:7a:26:07:b2:f5:3d:e1:a7:
c2:0a:2a:71:05:97:ab:a4:10:ed:d5:c5:03:04:70:
d4:28:98:c7:5c:17:1c:12:66:35:e9:ad:3a:c6:aa:
31:83:d8:63:aa:d2:72:7a:58:90:cd:a6:d7:1c:8d:
1b:f0:3f:54:47:7a:d5:4b:9f:c3:58:25:fc:05:59:
8f:4e:94:fa:9b:98:bd:b3:ff:16:a0:99:65:bc:41:
22:29:f7:c0:50:63:20:fc:4c:62:8e:6a:66:9c:92:
45:a6:df:1e:e3:57:dd:f6:50:a8:6b:ee:01:f8:1c:
fe:9f:47:52:05:29:9b:8c:9c:c2:96:47:b6:36:f1:
31:09:7a:3e:54:b7:16:88:1f:f4:0a:28:0e:bf:cd:
d6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F8:18:98:13:6D:AA:25:EF:6F:7E:E6:82:31:4D:4B:7D:B5:F9:1D
X509v3 Authority Key Identifier:
keyid:DF:75:9B:5A:F3:DA:6C:9D:F0:33:B0:DE:99:89:70:A4:E7:96:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33WbWvPabJ3wM7DemYlwpOeWVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/9508712f-fe65-409d-b359-edec9d80231f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/fe3737fb-095d-444c-92f4-3f7221fb544c/0XE5tZVyuGeaA_h7-1qBp7aY4So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.74.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:56:c3:5f:b4:5f:ce:95:b9:b6:2a:46:7a:44:2e:0c:65:5c:
6b:b4:ae:7c:19:74:63:f5:6c:71:d4:b2:00:d9:94:e2:78:9f:
a6:83:d0:11:2b:05:ab:af:93:f5:2f:34:11:0c:c2:45:bb:d5:
a3:97:36:33:02:5d:47:48:61:4c:9b:dc:89:4d:9e:aa:68:57:
93:b7:29:81:06:1c:0b:14:c7:92:06:9a:28:6a:06:fb:39:89:
64:21:46:f1:d3:d3:63:fb:50:8c:d3:d2:71:84:81:db:04:c0:
5d:c3:6a:33:60:f8:7e:8e:cc:c2:27:85:39:07:a7:bc:23:f4:
52:0b:fb:39:99:3e:5b:cc:8a:2a:24:21:7a:6b:fe:c5:b0:81:
b4:76:28:5d:87:3e:57:15:33:03:d7:4a:1a:11:48:ed:7b:2d:
42:80:7b:ad:1e:be:0f:84:83:b1:01:bf:61:84:b0:7e:2e:26:
83:c1:d0:f6:19:1f:21:0c:65:21:0a:72:8d:ed:1a:c8:51:5e:
93:6e:ba:56:b8:54:16:3f:b1:dd:c9:88:f6:7e:39:c7:31:d7:
18:b7:ec:f9:31:e9:ab:6e:b4:aa:3f:9d:85:5b:78:c8:3a:6f:
67:7f:ce:44:5d:ab:2c:36:d0:ef:fa:21:70:1e:58:24:0b:3a:
50:39:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:29:01 2026 by rpki-client